教學大綱與進度

課程基本資料：

學年期	課號	課程名稱	階段	學分	時數	修	教師	班級	人	撤	備註
111-2	317125	數位鑑識與調查	1	3.0	3	★	林敬皇	資財所 管理博所 創新資安學位學程	18	3	科研240/資財四甲乙碩、創新資安學程和管理博班合開

教學大綱與進度：

教師姓名	林敬皇　教師諮商時間(Office Hours)
Email	gbox@ntut.edu.tw
最後更新時間	2023-02-15 17:31:47
課程大綱	資訊安全保險相關事故的理賠調查，使得數位鑑識在金融或資訊領域的重要性日益提升。數位鑑識與調查課程主要說明如何找到入侵或犯罪留下的可能的足跡，並介紹如何在合法與符合鑑識程序規範的前提下蒐集足夠的證據並保護這些有用的證據，以做為未來訴訟有效的佐證。在課程的設計上將以數位鑑識相關國際證照的領域與內容為主，除了教授學生數位鑑識的專業知識外，期能輔導學生取得數位鑑識相關證照。 The cyber security incident investigation for the cyber insurance has made digital forensics more and more important in the financial or information industry. This course focuses on identifying possible footprints of intrusions or crimes and collecting sufficient evidence and protect such useful evidence in order to be effective in future litigation. In the design of the course, the domain and content of the digital forensics international certification licenses will be mainly used. In addition to teaching the professional knowledge of digital forensics, it can also help the students obtain digital forensics certification in the future.
課程進度	週次/Week - 單元主題/Topic 1. Introduction Digital Forensic 2. Systems, Disks, and Media 3. Forensic Analysis 4. Acquiring Data, Duplicating Data, and Recovering Deleted Files 5. Steganography and Application Password Crackers 6. Forensic Software and Hardware 7. Windows, Linux, and Macintosh Boot Processes 8. Windows Forensic Analysis 9. UNIX Forensic Analysis 10. Macintosh Forensic Analysis 11. Embedded Systems Analysis 12. Mobile Network Investigations 13. Investigating Network Traffic and Investigating Logs 14. Router Forensics and Network Investigations 15. Investigating Wireless Attacks 16. Intrusion Investigation 17. Defeating Anti-forensics Techniques 18. Final Exam(Lab)
評量方式與標準	Participation - 10% Exercise/Homework - 50% Lab Report - 30%
使用教材、參考書目或其他	【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】 使用外文原文書：是 Self-made teaching materials & TextBook： Handbook of Digital Forensics and Investigation, Eoghan Casey, Academic Press, Available, https://www.sciencedirect.com/book/9780123742674/handbook-of-digital-forensics-and-investigation#book-info
課程諮詢管道	1. Office Hour: Tuesday and Wednesday 13:00-16:00 2. Discuss and ask questions through NTUT i Academy PLUS (https://istudy.ntut.edu.tw/) 3. Mail me
備註	1. The course handouts are published in the NTUT i Academy PLUS course. 2. If it is announced that remote classes will be taught online, the relevant course files will be recorded and uploaded in the NTUT i Academy PLUS (https://istudy.ntut.edu.tw/)